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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 . 17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1 .17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on 4/17/2006 has been entered. 

Response to Arguments 

2. In response to communications filed on 4/17/2006, applicant amends claims 88, 94, 100, 
and 106. The following claims 88-109 are presented for examination. 

2. 1 Applicant's remarks, pages 11-12, filed on 4/17/2006, with respect to the rejection of 
claims 88-109 have been fully considered but they are not persuasive. Applicant has amended 
the independent claims to add an orderly processing of operation from (a) to (f). Applicant has 
not explained how the claims as amended are patentably distinct over the prior art. Applicant's 
arguments do not comply with 37 CFR 1. 1 1 1(c) because they do not clearly point out the 
patentable novelty which he or she thinks the claims present in view of the state of the art 
disclosed by the references cited or the objections made. Further, they do not show how the 
amendments avoid such references or objections. Therefore, Examiner's previous response in 
the advisory action explaining how the prior art discloses the claimed invention is still valid. To 
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expedite the prosecution, a new ground of rejection is made. Upon further consideration, the 
rejection of the claims as amended is set forth below. 

Claim Rejections - 35 USC §103 
3. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject matter 
sought to be patented and the prior ail are such that the subject matter as a whole would have 
been obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains. Patentability shall not be negatived by the manner in which 
the invention was made. 

3.1 Claims 88-109 are rejected under 35 U.S.C. 103(a) as being unpatentable over US Patent 
6,470,085 to Uranaka et al in view of Non-Patent Literature Bruce Schneier; "Applied 
Cryptography", 1996; John Wiley & Sons; Second edition; Pages 31-32, 39, 176-177, and 357- 
360 and in view of US Patent 6,260,141 to Park. 

3 2 As per claims 88-89, 94, 96-101, 106, and 108-109, Uranaka et al substantially 
discloses a method for enabling access to a software product, communication to enable the 
access to the software product being between a user computer and a server computer, the user 
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computer executing program instructions to enable the method (column 4, lines 44-65), 
comprising: receiving user information from the user computer (column 3, lines 30-45); 

Uranaka et al discloses a charged information or application package that can be 
distributed to a client either off-line or on-line in which a client applies for service by requesting 
software product from a server (see column 4, line 45 through column 5, line 8) that meets the 
recitation of initiating access to the server computer the initiating causing creation of application 
package that includes key generation as described below. The server records members' 
information to generate software product to be distributed to specific subscribers (see column 5, 
lines 13-20 and figure 1). Uranaka et al discloses communicating a server public key (Pks) 
(that meets the recitation of user public key) from a key pair (Pks, Sks), generating at the server 
using client's information that meets the recitation of user key pair being generating using 
information from a specific user (see column 5, lines 58 through column 6, line 5; column 19, 
lines 2-25; and column 15, lines 55-67). Although not specifically stated that the key pair (Pks, 
Sks) is generated using user information, generating user key pair at the server using information 
from a specific user is well known as disclosed in US Patents 6,195,432 and Korean Application 
number KR 1998-033266 and JP9-244886 in Applicant's disclosure filed on 8/1/05 and US 
Patent 5,490216, and it would have been obvious to one of ordinary skill in the art to make such 
a modification in order to limit control of usage only to specific individual members as suggested 
by Uranaka et al (see col. 14, lines 25-37). Column 14, lines 25-37 of Uranaka discloses 
recording specific public key on the DVD and each public key is assigned to specific family 
member, therefore there is suggestion that key pair can be generated using information from a 
specific user. Uranaka et al also discloses generating user key pair (Pku,Sku) at the user 
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computer that meets the recitation of console key pair and sending the user public key (console 
key) to the server to use for double encryption (column 7, lines 1-9; column 1 1, lines 13-20 and 
column 22, lines 26-36) and suggests that data transmitting with the service request can be 
encrypted (column 18, line 61 through column 19, line 2). As admitted by Applicant in the reply 
dated 2/13/06 that keys must be created before they are sent, it is apparent to one of ordinary 
skill in the art that the user public key (console key) has been generated at the user before it was 
sent to the server. Uranaka et al further discloses the steps for playing the desired application 
package comprising receiving a title ID from the user computer, the title ID identifying the 
software product for which access is desired, the title ED being encrypted by the user public key 
(column 22, lines 25-27 and column 18, lines 61 through column 19, line 2; and column 24, lines 
30-40); retrieving a title private key based on the title ID received, the title private key being 
double encrypted asymmetrically by the server computer using the console public key and the 
user private key, use of the console public key created at the user computer defining a first layer 
of encryption, use of the user private key created at the server computer defining a second layer 
of encryption, the title private key and the title public key defining a title key pair (column 22, 
lines 29-36); and forwarding the double encrypted title private key to the user computer so that 
the user computer can use the title private key to decrypt the software product encrypted by using 
the title public key (column 22, lines 36-50 and column 14, line 59 through column 15, line 21). 

Uranaka et al discloses the invention as a whole comprising of exchanging at least three 
key pairs between the client and the server; suggests that data transmitting with the service 
request can be encrypted (column 18, lines 61 through column 19, line 2); and discloses the 
double encryption of a title private key Kv using a key generating by the user Pku and a key 
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generating by the server (R), Uranaka et al discloses double encryption and the key (Kv) sent 
by the server is encrypted by two keys (one key from the server and one key from the user): a 
server key R and encrypted by a public key Pku (column 15, lines 1-4). Uranaka et al even 
discloses signing the double encryption key with a key pair (column 15, lines 55-67). The 
decryption steps in the claims, for instance in claims 96-97 are disclosed in Uranaka et al 
because they are just the reverse of the encryption steps cited above as known in the art of 
cryptography. The difference between Uranaka et al and the claimed invention is that the key 
(R) is a shared key. 

It is well known that using key pair provides more security than a shared key. Schneier 
also discloses multiple encryption and suggests making sure that multiple keys are different and 
independent to benefit from multiple encryption. Therefore, it would have been obvious to one 
of ordinary skill in the art at the time the invention was made to modify the method of Uranaka 
et al to change the symmetric random key to an asymmetric key in order to provide more 
security as taught by Schneier. This modification would have been obvious to one skilled in the 
art to use the random key as a key pair instead of using it as a shared key because asymmetric 
cryptography is more secure than symmetric cryptography so it will provide more security 
because key may also be compromised during transmission and using different key that is known 
only to one party may benefit in security as suggested by Schneier. 

Park in analogous art discloses a software license control system wherein the user 
performs user registration and the registration server generates key pair at the server using user 
information key (see column 3, lines 40-46 and column 4, lines 20-46) and further discloses 
double encryption by encrypting license information using a server secret key and a user public 
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key (see column 4, lines 20-46). Park also discloses in one embodiment a method of using 
asymmetrically double encryption by a server defining a first layer of encryption by using a user 
public key created at the user and use of a software secret key created at the server defining a 
second layer of encryption (column 4, lines 46-60). Therefore, it would have been obvious to 
one of ordinary skill in the art at the time the invention was made to modify the method of 
Uranaka et al to create user key pairs at the server using user information and to use 
asymmetrically double encryption in transferring sensitive information. The motivation to do so 
is provided by Park who teaches unauthorized use of a software product, wherein the control of 
the software product can be user specific or user computer hardware specific as desired when 
same/different users want to use the software from different computers or from the same 
computer. Also as known in public-key encryption, each party (servers and users) must possess 
one of the key pairs to perform encryption/decryption (see column 4, lines 20-32 and column 3, 
lines 22-35). 

As per claims 90, 95, 102, and 107, Uranaka et al discloses receiving purchase 
information from the user computer (column 12, lines 5-25); creating an electronic token based 
on the purchase information; and forwarding to the user computer, the electronic token that 
permits use of the decrypted software product in a restricted manner (column 12, lines 40-67). 

As per claims 91 and 103, Uranaka et al discloses wherein the initiating of the access to 
the server computer is carried out by forwarding user information specific to the user computer 



Application/Control Number: 09/773,716 
Art Unit. 2136 



Page 8 



to the server computer (column 5, lines 10-42; column 7, lines 57-67; and column 8, lines 34- 
41). 

As per claims 92 and 104, Uranaka et al discloses different embodiments or alternatives 
of creating key pairs at the server based on user information (column 8, lines 34-42 and column 
15, lines 21-67). 

As per claims 93 and 105, Uranaka et al discloses wherein the console key pair is 
created by the user computer by using hardware identification means (column 18, lines 41-53; 
column 22, lines 26-36). 

Conclusion 

4. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carl Colin whose telephone number is 571-272-3862. The 
examiner can normally be reached on Monday through Thursday, 8:00-6:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
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system, see http://pair-direct.uspto. gov . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Carl Colin ll^rJL^^ 
Patent Examiner /J^EIKH 
June 22, 2006 SUPERVISORY PATENT EXAMINER 

TECHNOLOGY CENTER 2100 



